CVE-2026-97566

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The in-kernel MPTCP path manager contains an asymmetry between removal paths that can leave a stale ADD ADDR announcement entry active when removing the id 0 endpoint. This occurs because the id 0 removal path, specifically within the mptcp nl remove id zero address() function, fails to tear down pending announcements, whereas the non-zero id path utilizes mptcp nl remove subflow and signal addr() to call mptcp pm remove announced() for cleanup. If the path manager later reselects id 0 after adding another signal endpoint, it may encounter the stale anno list entry, triggering a warning in the mptcp pm announced alloc() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.